Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a323030303a3a2f34302d3434203d3e20323731333830.roa
File:                     323830343a376139343a323030303a3a2f34302d3434203d3e20323731333830.roa (raw, json)
Hash identifier:          zmCa6Hb1++PPoe0uzSfBS56I5UFOYwHYaiNhwCTZcGo=
Subject key identifier:   11:2E:A3:BE:BD:E2:C2:75:72:CC:75:10:C6:CD:9C:BD:A4:96:30:51
Certificate issuer:       /CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
Certificate serial:       048C87B831DAF7BDAC77FE514A8AE1C826EE8581
Authority key identifier: 4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a323030303a3a2f34302d3434203d3e20323731333830.roa
Signing time:             Thu 04 Apr 2024 13:38:36 +0000
ROA not before:           Thu 04 Apr 2024 13:33:36 +0000
ROA not after:            Thu 03 Apr 2025 13:38:36 +0000
asID:                     271380
IP address blocks:        2804:7a94:2000::/40 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl
                          rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 04:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:8c:87:b8:31:da:f7:bd:ac:77:fe:51:4a:8a:e1:c8:26:ee:85:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AB61C2BEB228083B61C39B853C001DD574DE2FB
        Validity
            Not Before: Apr  4 13:33:36 2024 GMT
            Not After : Apr  3 13:38:36 2025 GMT
        Subject: CN=112EA3BEBDE2C27572CC7510C6CD9CBDA4963051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9d:98:34:ed:3b:34:ec:5d:6b:02:fd:23:79:
                    a0:02:b6:89:cf:43:88:85:be:8b:f2:38:5c:14:d6:
                    93:c8:10:b3:1c:7f:21:c0:59:11:85:cc:b6:d9:b6:
                    bb:81:33:db:85:7b:85:cf:3d:a2:30:7b:6d:67:69:
                    90:ff:dc:81:08:d0:e5:ee:bc:b7:98:3b:c5:6a:d0:
                    96:85:6d:cc:3e:65:ac:4a:1a:ff:ae:69:12:12:b5:
                    57:8c:95:e1:68:45:01:a6:6a:c9:ad:8d:ac:d5:68:
                    3b:48:39:82:3f:19:47:45:01:17:5d:30:35:be:24:
                    9a:da:91:57:0b:9f:1e:72:d3:72:90:3f:fe:f8:26:
                    9f:b0:61:dd:bf:6c:4a:8f:5b:3a:cd:b1:e1:b0:1f:
                    f3:01:53:95:db:4e:a5:df:91:9a:a0:02:ec:80:d1:
                    bb:3b:ff:5d:10:bb:38:63:9a:02:b1:5d:ba:b4:a7:
                    01:43:05:72:0b:32:e6:49:02:54:8e:c2:e4:42:72:
                    c2:b6:eb:74:11:bf:15:b7:16:06:42:8d:78:9d:1c:
                    41:24:cb:33:46:55:79:cd:8a:c5:6e:a7:f2:f6:53:
                    8b:63:1b:ab:75:38:58:05:88:3d:b9:5b:4b:05:61:
                    1c:5b:9a:c5:44:ee:2b:7d:ff:d3:6e:6d:cc:68:64:
                    68:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2E:A3:BE:BD:E2:C2:75:72:CC:75:10:C6:CD:9C:BD:A4:96:30:51
            X509v3 Authority Key Identifier:
                keyid:4A:B6:1C:2B:EB:22:80:83:B6:1C:39:B8:53:C0:01:DD:57:4D:E2:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB61C2BEB228083B61C39B853C001DD574DE2FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/1/323830343a376139343a323030303a3a2f34302d3434203d3e20323731333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a94:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:41:d5:e5:19:99:8c:25:8b:12:1f:f2:a6:c0:db:58:eb:76:
         f6:d3:6b:bd:1d:5c:1b:66:a4:31:2c:17:d1:b4:ab:d4:0c:a2:
         a3:a2:cc:58:67:fd:01:68:79:3b:07:a5:f6:1e:fe:21:e8:6e:
         53:57:ff:40:9d:1a:48:22:cd:b7:ed:e2:67:3e:e4:63:a3:58:
         ac:4f:fd:e3:02:ec:9b:d8:55:34:5f:33:ba:8e:27:5e:25:b2:
         40:4f:45:a5:ed:5b:9c:22:58:7c:65:f8:a4:a1:67:a0:af:9c:
         c0:a3:55:ac:1b:d9:8c:5f:5b:3c:96:2e:9c:03:01:51:0c:a3:
         13:60:de:e8:f1:aa:e7:6d:16:b8:1b:ca:af:ee:6d:7f:c8:7c:
         11:96:0e:89:45:91:f5:9e:6a:50:fe:a6:51:60:2d:b9:61:32:
         23:b1:58:d4:2a:6b:34:fd:3c:5d:69:ca:fb:50:bd:0c:4b:26:
         71:d4:55:69:3d:33:87:b9:19:3d:51:54:03:6f:51:45:82:9a:
         36:84:06:69:03:04:d9:53:a1:87:6e:29:68:f8:10:c1:d1:90:
         97:1f:99:4b:a4:44:a8:37:9c:26:6c:b7:b0:2f:77:29:80:fe:
         fb:15:22:74:09:58:00:f0:72:cf:25:d7:59:1e:b3:a6:3b:ed:
         c5:e3:47:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:19:32 2024 by rpki-client on console-ams.rpki-client.org